Overview

overview

10

Static

static

bb3df699f2...1d.exe

windows7-x64

10

bb3df699f2...1d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb3df699f28b1fd3eb65eb42caa2a454c0322c33b1f784c464aa8305ce5a7a1d

  • Size

    220KB

  • Sample

    221030-ashz5sddd8

  • MD5

    93478d88fb808737137632812698f8c9

  • SHA1

    a07714b2756aef03bfd0729ae86aaf5869ea1d8d

  • SHA256

    bb3df699f28b1fd3eb65eb42caa2a454c0322c33b1f784c464aa8305ce5a7a1d

  • SHA512

    432860944a48d8bbf9583a8c658a6a37889c2b461e7a124bac5e6b5873cb1d768b541f4f8b56a6e05b8c3c4c50f01e21a870744862b447093531834dddc029aa

  • SSDEEP

    3072:8wOuQWkr8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3J+N/9:3O4ko15x9SHVeOj0F

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bb3df699f28b1fd3eb65eb42caa2a454c0322c33b1f784c464aa8305ce5a7a1d

    • Size

      220KB

    • MD5

      93478d88fb808737137632812698f8c9

    • SHA1

      a07714b2756aef03bfd0729ae86aaf5869ea1d8d

    • SHA256

      bb3df699f28b1fd3eb65eb42caa2a454c0322c33b1f784c464aa8305ce5a7a1d

    • SHA512

      432860944a48d8bbf9583a8c658a6a37889c2b461e7a124bac5e6b5873cb1d768b541f4f8b56a6e05b8c3c4c50f01e21a870744862b447093531834dddc029aa

    • SSDEEP

      3072:8wOuQWkr8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3J+N/9:3O4ko15x9SHVeOj0F

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks